spfevent[.]net

PhishDestroy identifies spfevent.net as a generic phishing domain currently taken offline. The domain posed as Spectrum Finance, an open-source cross-chain DEX, to deceive users into surrendering sensitive information or funds. Although the site is now inactive, its threat potential remains significant as it was actively used for credential theft or financial fraud.

This domain resolves to IP 188.114.96.3 and was registered through NiceNIC International Group Co., Limited on February 21, 2026. It appears on one security blocklist and is flagged by Google Safe Browsing as a phishing site. VirusTotal reports that 7 out of 95 security vendors flagged the domain, indicating moderate but clear malicious detection. The SSL certificate was issued by Google Trust Services (WE1), which is common for legitimate sites, meaning the phishing site used a valid certificate to appear trustworthy.

Given that spfevent.net is now offline but was previously active and flagged for phishing, users should avoid any interaction with this domain or any related communications. It is advisable to delete any emails or messages referencing this domain and to monitor accounts for unauthorized activity if any credentials were entered. PhishDestroy recommends blocking this domain at the network level and reporting any associated links to security teams.